CCNP Practice Test 12 — 15 Questions

Question 1

Drag and drop the steps of a RESTCONF PUT transaction on IOS-XE into the correct order, from first to last.

Accepted Answer

Authenticate with the IOS-XE device. The correct order ensures the RESTCONF PUT request is properly authenticated, targeted, and validated before the device applies the configuration. First, the client must authenticate with the device. Then it constructs the PUT request with the target URI. The device validates the request, applies the configuration, and finally sends a success response.

Question 2

An engineer is using the Cisco DNA Center GUI to create a new site hierarchy. They add a building under an existing area. After saving, they run a Python script to verify the site via API:

import requests

url = "https://dna-center.local/dna/intent/api/v1/site"
headers = {"X-Auth-Token": "token"}
response = requests.get(url, headers=headers, verify=False)
sites = response.json()['response']
for site in sites:
    if site['name'] == 'Building-A':
        print(site['id'])

What is the output if the building was created successfully?

Accepted Answer

A UUID string such as '123e4567-e89b-12d3-a456-426614174000'. The script prints the site ID of the building if it exists. The output will be a string representing the UUID of the building.

Answer

The script will print 'Building-A'

Answer

The script will print the entire site dictionary

Answer

The script will raise an error because the API returns paginated results

Question 3

A network engineer uses the Cisco DNA Center API to trigger a provisioning workflow for a new device. The API call returns the following JSON response:

{
  "response": {
    "taskId": "task-12345",
    "url": "/api/v1/task/task-12345"
  },
  "version": "1.0"
}

The engineer then polls the task status using the URL. Which HTTP method should be used to retrieve the task status?

Accepted Answer

GET. To retrieve the status of a task, a GET request should be sent to the provided URL. The task ID is used to query the task API endpoint.

Answer

POST

Answer

PUT

Answer

DELETE

Question 4

Examine the following partial Cisco IOS-XE configuration:

interface GigabitEthernet0/1
 switchport mode access
 switchport access vlan 10
 ip access-group ACL_IN in
 spanning-tree portfast

What is the effect of this configuration?

Accepted Answer

The port will immediately transition to forwarding state, reducing STP convergence time for end hosts.. The configuration enables PortFast on an access port, allowing it to transition directly to forwarding state, bypassing the listening and learning phases. This is commonly used for end-host ports to avoid delays caused by spanning-tree convergence.

Answer

The port will become a trunk port and participate in VLAN trunking.

Answer

The port will use Rapid PVST+ and immediately forward after a link failure.

Answer

The port will block all inbound traffic due to the ACL.

Question 5

Drag and drop each MP-BGP address family on the left to its matching use case on the right.

Accepted Answer

VPNv4: Carries IPv4 VPN routes with MPLS labels across the provider core. VPNv4 address family carries IPv4 VPN routes; VPNv6 carries IPv6 VPN routes; IPv4 unicast carries global IPv4 routes; IPv6 unicast carries global IPv6 routes; L2VPN address family carries Layer 2 VPN information.

Question 6

A developer sends a RESTCONF request to retrieve interface statistics from a Cisco IOS-XE device:

Request:
```
GET /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1/statistics HTTP/1.1
Host: 192.168.1.1
Accept: application/yang-data+json
```

Response:
```json
{
  "ietf-interfaces:statistics": {
    "discontinuity-time": "2023-01-01T00:00:00Z",
    "in-octets": 1000000,
    "in-errors": 0,
    "out-octets": 500000,
    "out-errors": 0
  }
}
```

What is the correct way to interpret this response?

Accepted Answer

The response indicates the interface has 1,000,000 bytes received and 500,000 bytes transmitted.. The response shows the statistics for the interface, including in-octets and out-octets. The data is in JSON format with the namespace prefix 'ietf-interfaces:'. The engineer can use this data to monitor interface utilization.

Answer

The response shows the interface has 1,000,000 packets received and 500,000 packets transmitted.

Answer

The response indicates the interface has errors, so it is malfunctioning.

Answer

The response is invalid because the namespace should be 'ietf-interfaces:interfaces-state'.

Question 7

Which of the following is a valid transport protocol for model-driven telemetry receivers on Cisco IOS-XE?

Accepted Answer

gRPC. gRPC is a supported transport protocol for telemetry receivers, along with gNMI and others.

Answer

HTTP

Answer

FTP

Answer

SNMP

Question 8

Examine the following telemetry configuration:

telemetry ietf subscription 500
 encoding encode-kvgpb
 filter xpath /interfaces/interface/state/counters
 stream yang-push
 update-policy periodic 500
 receiver ip address 10.1.1.1 50000 protocol grpc

A network engineer wants to add a second receiver for redundancy. Which additional configuration is correct?

Accepted Answer

Add a second receiver under the same subscription: receiver ip address 10.1.1.2 50000 protocol grpc. To add a second receiver, you add another receiver line under the same subscription.

Answer

Create a new subscription with the same parameters and a different receiver.

Answer

Modify the existing receiver to use multicast address 239.1.1.1.

Answer

Use the backup-receiver command under the receiver.

Question 9

Drag and drop the steps of the gRPC dial-out telemetry subscription flow into the correct order, from first to last.

Accepted Answer

Configure telemetry receiver with IP and port. The correct order is: first, configure the telemetry receiver (destination) on the network device. Next, define a sensor group to specify which YANG data paths to collect. Then, create a subscription associating the sensor group with the receiver. After that, enable the subscription to start streaming data. Finally, the device streams telemetry data to the receiver.

Question 10

Drag and drop the steps of the 802.1X EAP-TLS authentication exchange into the correct order, from first to last.

Accepted Answer

Supplicant sends EAPoL-Start. In the 802.1X EAP-TLS authentication exchange, the process begins with the supplicant sending an EAPoL-Start message to initiate authentication. The authenticator then sends an EAP-Request/Identity. The supplicant replies with EAP-Response/Identity, which the authenticator forwards to the RADIUS server. Finally, the RADIUS server sends an EAP-Request for the client certificate to begin the TLS handshake.

Question 11

Drag and drop each First Hop Redundancy Protocol on the left to its matching function on the right.

Accepted Answer

HSRP: Cisco-proprietary active/standby gateway redundancy with one virtual IP. HSRP uses an active/standby model with one virtual MAC; VRRP uses an election process with a single virtual MAC; GLBP load-balances across multiple gateways.

Question 12

Drag and drop each SD-Access fabric role on the left to its matching function on the right.

Accepted Answer

Fabric Border Node: Connects the SD-Access fabric to external Layer 2 or Layer 3 networks. The fabric border node connects the fabric to external networks, the fabric edge node connects endpoints to the fabric, and the fabric control node manages LISP mapping and VXLAN tunnels.

Question 13

Drag and drop each LISP message type on the left to its matching purpose on the right.

Accepted Answer

Map-Request: Queries the LISP mapping system for an EID-to-RLOC mapping. Map-Request queries the location of an EID, Map-Reply provides the mapping, Map-Register registers EID-to-RLOC mappings, Map-Notify confirms registration, and Map-Solicit triggers a Map-Request from the map-server.

Question 14

Drag and drop each SD-WAN plane on the left to its matching function on the right.

Accepted Answer

Control plane: Distributes OMP routes, TLOCs, and policy information between vSmart and WAN edges. The control plane handles routing and signaling; the data plane forwards packets; the management plane provides GUI/API access; the orchestration plane automates device onboarding and certificate management.

Question 15

Drag and drop the steps of OMP route advertisement between vSmart and vEdge into the correct order, from first to last.

Accepted Answer

vEdge learns local route via connected or static. OMP route advertisement begins with the vEdge learning a route locally, then originating an OMP route and sending it to vSmart, which processes and installs it in the route table, then advertises it to other vEdge routers, and finally the receiving vEdge installs the OMP route into its forwarding table.